ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2016-4008

—
CVSS 3.0
5.9 medium
EPSS
26%p98
Published
()
Modified
Description

The _asn1_extract_der_octet function in lib/decoding.c in GNU Libtasn1 before 4.8, when used without the ASN1_DECODE_FLAG_STRICT_DER flag, allows remote attackers to cause a denial of service (infinite recursion) via a crafted certificate.

Vendors
canonicalopensusegnufedoraproject
Products
ubuntu linux, opensuse, libtasn1, fedora
Weakness
CWE-399
Vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
NVD CVE.org GitHub PoCs EPSS (25.9%)

In the news

No ingested article mentions this CVE yet.